Openstack-M版部署一keystone认证服务

冷不防 2022-05-21 05:04 224阅读 0赞

**1.安装keystone服务所需的软件包**

<table> 
 <tbody> 
 <tr> 
 <td>[root@controller ~]# yum install openstack-keystone httpd mod_wsgi openstack-utils -y </td> 
 </tr> 
 </tbody> 
</table>

**2.创建keystone的数据库（每个服务都需要操作的）**

<table> 
 <tbody> 
 <tr> 
 <td>2.1登录数据库 [root@controller ~]# mysql -u root -p000000 2.2创建keystone数据库 MariaDB [(none)]&gt; CREATE DATABASE keystone; Query OK, 1 row affected (0.00 sec) 2.3授予keystone用户对keystone数据库的访问权限（000000为密码） MariaDB [(none)]&gt; GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost'&nbsp; &nbsp; &nbsp; -&gt; &nbsp; IDENTIFIED BY '000000'; Query OK, 0 rows affected (0.00 sec) MariaDB [(none)]&gt; GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY '000000'; Query OK, 0 rows affected (0.00 sec) 2.4退出数据库 MariaDB [(none)]&gt; exit Bye </td> 
 </tr> 
 </tbody> 
</table>

**3.配置keystone认证服务**

<table> 
 <tbody> 
 <tr> 
 <td>3.1生成一个随机值用在初始配置时作管理令牌 [root@controller ~]# ADMIN_TOKEN=`openssl rand -hex 10` 3.2配置/etc/keystone/keystone.conf [root@controller ~]# openstack-config --set /etc/keystone/keystone.conf DEFAULT admin_token $ADMIN_TOKEN [root@controller ~]# openstack-config --set /etc/keystone/keystone.conf database connection mysql+pymysql://keystone:000000@controller/keystone &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; [root@controller ~]# openstack-config --set /etc/keystone/keystone.conf token provider fernet 3.3同步数据库 [root@controller ~]# su -s /bin/sh -c "keystone-manage db_sync" keystone 3.4初始化fernet [root@controller ~]# keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone 3.5编辑/etc/httpd/conf/httpd.conf文件（95为行数） [root@controller ~]# vim &nbsp;/etc/httpd/conf/httpd.conf &nbsp;95 ServerName controller 3.6创建/etc/httpd/conf.d/wsgi-keystone.conf文件 [root@controller ~]# vim /etc/httpd/conf.d/wsgi-keystone.conf Listen 5000 Listen 35357 &lt;VirtualHost *:5000&gt; &nbsp; &nbsp; WSGIDaemonProcess keystone-public processes=5 threads=1 user=keystone group=keystone display-name=%{GROUP} &nbsp; &nbsp; WSGIProcessGroup keystone-public &nbsp; &nbsp; WSGIScriptAlias / /usr/bin/keystone-wsgi-public &nbsp; &nbsp; WSGIApplicationGroup %{GLOBAL} &nbsp; &nbsp; WSGIPassAuthorization On &nbsp; &nbsp; ErrorLogFormat "%{cu}t %M" &nbsp; &nbsp; ErrorLog /var/log/httpd/keystone-error.log &nbsp; &nbsp; CustomLog /var/log/httpd/keystone-access.log combined &nbsp; &nbsp; &lt;Directory /usr/bin&gt; &nbsp; &nbsp; &nbsp; &nbsp; Require all granted &nbsp; &nbsp; &lt;/Directory&gt; &lt;/VirtualHost&gt; &lt;VirtualHost *:35357&gt; &nbsp; &nbsp; WSGIDaemonProcess keystone-admin processes=5 threads=1 user=keystone group=keystone display-name=%{GROUP} &nbsp; &nbsp; WSGIProcessGroup keystone-admin &nbsp; &nbsp; WSGIScriptAlias / /usr/bin/keystone-wsgi-admin &nbsp; &nbsp; WSGIApplicationGroup %{GLOBAL} &nbsp; &nbsp; WSGIPassAuthorization On &nbsp; &nbsp; ErrorLogFormat "%{cu}t %M" &nbsp; &nbsp; ErrorLog /var/log/httpd/keystone-error.log &nbsp; &nbsp; CustomLog /var/log/httpd/keystone-access.log combined &nbsp; &nbsp; &lt;Directory /usr/bin&gt; &nbsp; &nbsp; &nbsp; &nbsp; Require all granted &nbsp; &nbsp; &lt;/Directory&gt; &lt;/VirtualHost&gt; 3.7启动http,并设置开机自动启动[root@controller ~]# systemctl enable httpd.service Created symlink from /etc/systemd/system/multi-user.target.wants/httpd.service to /usr/lib/systemd/system/httpd.service. [root@controller ~]# systemctl start httpd.service&nbsp; </td> 
 </tr> 
 </tbody> 
</table>

**4.创建服务实体和API端点**

<table> 
 <tbody> 
 <tr> 
 <td>4.2创建服务实体和API端点 [root@controller ~]# openstack service create &nbsp; --name keystone --description "OpenStack Identity" identity +-------------+----------------------------------+ | Field &nbsp; &nbsp; &nbsp; | Value &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| +-------------+----------------------------------+ | description | OpenStack Identity &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | | enabled &nbsp; &nbsp; | True &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | | id &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| 248daef05e624334b115fd8f6fdaca20 | | name &nbsp; &nbsp; &nbsp; &nbsp;| keystone &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | | type &nbsp; &nbsp; &nbsp; &nbsp;| identity &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | +-------------+----------------------------------+ 4.3创建Identity Service API端点： [root@controller ~]# openstack endpoint create --region RegionOne \ identity public http://controller:5000/v3 +--------------+----------------------------------+ | Field &nbsp; &nbsp; &nbsp; &nbsp;| Value &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| +--------------+----------------------------------+ | enabled &nbsp; &nbsp; &nbsp;| True &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | | id &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | 36878f0a8a984f5b91a4c565027c7d4c | | interface &nbsp; &nbsp;| public &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | | region &nbsp; &nbsp; &nbsp; | RegionOne &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| | region_id &nbsp; &nbsp;| RegionOne &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| | service_id &nbsp; | 248daef05e624334b115fd8f6fdaca20 | | service_name | keystone &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | | service_type | identity &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | | url &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| http://controller:5000/v3 &nbsp; &nbsp; &nbsp; &nbsp;| +--------------+----------------------------------+ [root@controller ~]# openstack endpoint create --region RegionOne \ identity internal http://controller:5000/v3 +--------------+----------------------------------+ | Field &nbsp; &nbsp; &nbsp; &nbsp;| Value &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| +--------------+----------------------------------+ | enabled &nbsp; &nbsp; &nbsp;| True &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | | id &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | 54ef532d9d7d4380b5bca3e8ce586b1b | | interface &nbsp; &nbsp;| internal &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | | region &nbsp; &nbsp; &nbsp; | RegionOne &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| | region_id &nbsp; &nbsp;| RegionOne &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| | service_id &nbsp; | 248daef05e624334b115fd8f6fdaca20 | | service_name | keystone &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | | service_type | identity &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | | url &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| http://controller:5000/v3 &nbsp; &nbsp; &nbsp; &nbsp;| +--------------+----------------------------------+ [root@controller ~]# openstack endpoint create --region RegionOne \ identity admin http://controller:35357/v3 +--------------+----------------------------------+ | Field &nbsp; &nbsp; &nbsp; &nbsp;| Value &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| +--------------+----------------------------------+ | enabled &nbsp; &nbsp; &nbsp;| True &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | | id &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | 663a7078970c474b8889144f9502c251 | | interface &nbsp; &nbsp;| admin &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| | region &nbsp; &nbsp; &nbsp; | RegionOne &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| | region_id &nbsp; &nbsp;| RegionOne &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| | service_id &nbsp; | 248daef05e624334b115fd8f6fdaca20 | | service_name | keystone &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | | service_type | identity &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | | url &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| http://controller:35357/v3 &nbsp; &nbsp; &nbsp; | +--------------+----------------------------------+ 4.4创建域（default 为域的名称） [root@controller ~]# openstack domain create --description "Default Domain" default +-------------+----------------------------------+ | Field &nbsp; &nbsp; &nbsp; | Value &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| +-------------+----------------------------------+ | description | Default Domain &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | | enabled &nbsp; &nbsp; | True &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | | id &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| 11c1d63da1784b51bc6d13335f635778 | | name &nbsp; &nbsp; &nbsp; &nbsp;| default &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| +-------------+----------------------------------+4.5在域中创建管理项目，用户和角色。 4.5.1创建管理项目： [root@controller ~]# openstack project create --domain default \ --description "Admin Project" admin +-------------+----------------------------------+ | Field &nbsp; &nbsp; &nbsp; | Value &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| +-------------+----------------------------------+ | description | Admin Project &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| | domain_id &nbsp; | 11c1d63da1784b51bc6d13335f635778 | | enabled &nbsp; &nbsp; | True &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | | id &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| 84f00df4afd847248adfebd326a81a42 | | is_domain &nbsp; | False &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| | name &nbsp; &nbsp; &nbsp; &nbsp;| admin &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| | parent_id &nbsp; | 11c1d63da1784b51bc6d13335f635778 | +-------------+----------------------------------+ 4.5.2创建管理员用户： [root@controller ~]# openstack user create --domain default \ --password-prompt admin User Password: Repeat User Password: +-----------+----------------------------------+ | Field &nbsp; &nbsp; | Value &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| +-----------+----------------------------------+ | domain_id | e0353a670a9e496da891347c589539e9 | | enabled &nbsp; | True &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | | id &nbsp; &nbsp; &nbsp; &nbsp;| ac3377633149401296f6c0d92d79dc16 | | name &nbsp; &nbsp; &nbsp;| admin &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| +-----------+----------------------------------+ 4.5.3创建管理员角色： [root@controller ~]# openstack role create admin +-----------+----------------------------------+ | Field &nbsp; &nbsp; | Value &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| +-----------+----------------------------------+ | domain_id | None &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | | id &nbsp; &nbsp; &nbsp; &nbsp;| 0c669b85c77d457abef3577a3d0bdfd7 | | name &nbsp; &nbsp; &nbsp;| admin &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| +-----------+----------------------------------+ 4.5.4将admin角色添加到admin项目和用户： [root@controller ~]# openstack role add --project admin --user admin admin 4.5.6创建server项目 [root@controller ~]# openstack project create --domain default \ --description "Service Project" service +-------------+----------------------------------+ | Field &nbsp; &nbsp; &nbsp; | Value &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| +-------------+----------------------------------+ | description | Service Project &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| | domain_id &nbsp; | 11c1d63da1784b51bc6d13335f635778 | | enabled &nbsp; &nbsp; | True &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | | id &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| 8a866739cb0a429a8119d140414003ab | | is_domain &nbsp; | False &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| | name &nbsp; &nbsp; &nbsp; &nbsp;| service &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| | parent_id &nbsp; | 11c1d63da1784b51bc6d13335f635778 | +-------------+----------------------------------+ 4.5.5创建demo项目 [root@controller ~]# openstack project create --domain default \ --description "Demo Project" demo +-------------+----------------------------------+ | Field &nbsp; &nbsp; &nbsp; | Value &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| +-------------+----------------------------------+ | description | Demo Project &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | | domain_id &nbsp; | 11c1d63da1784b51bc6d13335f635778 | | enabled &nbsp; &nbsp; | True &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | | id &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| 18d606f4d475401da1afd6369cb6c154 | | is_domain &nbsp; | False &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| | name &nbsp; &nbsp; &nbsp; &nbsp;| demo &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | | parent_id &nbsp; | 11c1d63da1784b51bc6d13335f635778 | +-------------+----------------------------------+ 4.5.6创建demo用户 [root@controller ~]# openstack user create --domain default \ --password-prompt demo User Password: Repeat User Password: +-----------+----------------------------------+ | Field &nbsp; &nbsp; | Value &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| +-----------+----------------------------------+ | domain_id | 11c1d63da1784b51bc6d13335f635778 | | enabled &nbsp; | True &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | | id &nbsp; &nbsp; &nbsp; &nbsp;| b39301a69ae84a31b7bbeea4b9186687 | | name &nbsp; &nbsp; &nbsp;| demo &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | +-----------+----------------------------------+ 4.5.7创建user角色 [root@controller ~]# openstack role create user +-----------+----------------------------------+ | Field &nbsp; &nbsp; | Value &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| +-----------+----------------------------------+ | domain_id | None &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | | id &nbsp; &nbsp; &nbsp; &nbsp;| 21138e7016784c5da2b950213f7d60e7 | | name &nbsp; &nbsp; &nbsp;| user &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | +-----------+----------------------------------+ 4.5.8将demo用户添加到demo项目，赋予user角色 [root@controller ~]# openstack role add --project demo --user demo user </td> 
 </tr> 
 </tbody> 
</table>

**5.验证操作**

<table> 
 <tbody> 
 <tr> 
 <td>5.1取消设置临时OS_TOKEN和OS_URL环境变量 [root@controller ~]# &nbsp;unset OS_TOKEN OS_URL 5.2用admin用户，请求身份验证令牌（输入admin用户的密码） [root@controller ~]# &nbsp;openstack --os-auth-url http://controller:35357/v3 \ --os-project-domain-name default --os-user-domain-name default \ --os-project-name admin --os-username admin token issue Password:&nbsp; +------------+---------------------------------------------------------------------------------------------------------------------------------+ | Field &nbsp; &nbsp; &nbsp;| Value &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | +------------+---------------------------------------------------------------------------------------------------------------------------------+ | expires &nbsp; &nbsp;| 2018-06-29T04:09:59.388878Z &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | | id &nbsp; &nbsp; &nbsp; &nbsp; | gAAAAABbNaMHpYCGIwUvsjiBK69PrpM2kpTp5VvhrWwDU2I0g3FYuxSBZo4Lf2vYtkyIsOLoR9Eu_Nw84AyOn2pBNgdghcRYDolZsvQjZe9O7lHB0iH5YA88C8t985X | | &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| xrW0sY8Rgf6y0Ux6WPj_BGMy8Eechm9trdyajJA1hQqRsOT-BNoZGzWc &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| | project_id | 84f00df4afd847248adfebd326a81a42 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| | user_id &nbsp; &nbsp;| 4d615ed7e32f48c78ed6037c93f0b2d2 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| +------------+--------------------------------------------------------------------------------------------------------------------------------- 5.2使用demo用户，请求身份验证令牌（输入demo用户的密码） [root@controller ~]# openstack --os-auth-url http://controller:5000/v3 \ --os-project-domain-name default --os-user-domain-name default \ --os-project-name demo --os-username demo token issue Password:&nbsp; +------------+---------------------------------------------------------------------------------------------------------------------------------+ | Field &nbsp; &nbsp; &nbsp;| Value &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | +------------+---------------------------------------------------------------------------------------------------------------------------------+ | expires &nbsp; &nbsp;| 2018-06-29T04:11:03.829120Z &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | | id &nbsp; &nbsp; &nbsp; &nbsp; | gAAAAABbNaNHOat7pZ5JupOmmpR3Lng_8cx16iTDvR1_8udNG0KPCTvMKEXm4FWhnUXS-sR4Zz-1L8XD72waLlm8WL2b0fzq5VpwnDo4DxEiQIEEc4wb5AC7rH- &nbsp; &nbsp; | | &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| q2o9zyi_CXmSAEuUBBx-biYzNqTI3u9SJ0FACzL-Fqouzj5VUoddFgvlI6JM &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| | project_id | 18d606f4d475401da1afd6369cb6c154 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| | user_id &nbsp; &nbsp;| b39301a69ae84a31b7bbeea4b9186687 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| +------------+---------------------------------------------------------------------------------------------------------------------------------+ 5.3编辑/etc/keystone/admin-openrc文件并添加以下内容： [root@controller ~]# vim /etc/keystone/admin-openrc export OS_PROJECT_DOMAIN_NAME=default export OS_USER_DOMAIN_NAME=default export OS_PROJECT_NAME=admin export OS_USERNAME=admin export OS_PASSWORD=000000 export OS_AUTH_URL=http://controller:35357/v3 export OS_IDENTITY_API_VERSION=3 export OS_IMAGE_API_VERSION=2 5.4编辑/etc/keystone/demo-openrc文件并添加以下内容： [root@controller ~]# vim /etc/keystone/demo-openrc export OS_PROJECT_DOMAIN_NAME=default export OS_USER_DOMAIN_NAME=default export OS_PROJECT_NAME=demo export OS_USERNAME=demo export OS_PASSWORD=000000 export OS_AUTH_URL=http://controller:5000/v3 export OS_IDENTITY_API_VERSION=3 export OS_IMAGE_API_VERSION=2 5.5通过/etc/keystone/admin-openrc 文件，请求令牌 [root@controller ~]# source /etc/keystone/admin-openrc&nbsp; [root@controller ~]# openstack token issue +------------+---------------------------------------------------------------------------------------------------------------------------------+ | Field &nbsp; &nbsp; &nbsp;| Value &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | +------------+---------------------------------------------------------------------------------------------------------------------------------+ | expires &nbsp; &nbsp;| 2018-06-29T04:13:10.302658Z &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | | id &nbsp; &nbsp; &nbsp; &nbsp; | gAAAAABbNaPGeJiJPQcSYdZN1nTbZjDeZIT3gCr6Cd-e2LOWZ7cFJ-R6HUMWA8Vnho- &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | | &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| dfQYElFCrhtwDVsFlByj4E1MjtRucWq8tcon8saHKxCseD3q2skjqvf1ryYdr41CuydDZPKm4yU6_8qknoqNhbwlj0mHqAfN1_9wDn52R6UjqH-pDn94 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| | project_id | 84f00df4afd847248adfebd326a81a42 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| | user_id &nbsp; &nbsp;| 4d615ed7e32f48c78ed6037c93f0b2d2 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| +------------+--------------------------------------------------------------------------------------------------------------------------------- </td> 
 </tr> 
 </tbody> 
</table>